This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32352e302f32342d3234203d3e20323032363632.roa File: 38392e3138352e32352e302f32342d3234203d3e20323032363632.roa (raw, json) Hash identifier: TyftH/+/S++REoQQkKy1UHTo4HUXUbNCcJaL9O8Eqtc= Subject key identifier: 09:CE:FD:FA:46:C2:24:0B:44:FB:84:2B:E4:A0:F8:62:3A:A0:F9:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 07247D4B08EDAC7493CBA09A9F2C8A2D4ACCA93F Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32352e302f32342d3234203d3e20323032363632.roa Signing time: Thu 12 Feb 2026 19:03:48 +0000 ROA not before: Thu 12 Feb 2026 18:58:48 +0000 ROA not after: Thu 11 Feb 2027 19:03:48 +0000 asID: 202662 IP address blocks: 89.185.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:24:7d:4b:08:ed:ac:74:93:cb:a0:9a:9f:2c:8a:2d:4a:cc:a9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:48 2026 GMT Not After : Feb 11 19:03:48 2027 GMT Subject: CN=09CEFDFA46C2240B44FB842BE4A0F8623AA0F9A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:4a:b3:46:a9:f0:b6:66:55:9b:26:50:f3: 65:69:08:55:f4:fe:bd:d7:30:55:27:22:8f:0e:b6: 0f:c2:00:64:fe:d1:19:37:62:9b:37:e5:1a:55:53: 93:93:9c:5f:e8:fc:68:dd:4d:15:42:0e:0a:90:63: 6e:b8:16:72:74:25:c2:a2:ea:29:df:a9:c2:63:1b: 35:99:4a:6b:8a:58:f9:d3:29:88:75:af:31:ee:23: 81:e5:4b:e6:69:7b:86:d8:84:5d:9a:ac:0b:75:24: 35:de:bc:17:02:5b:f7:77:4c:1c:1c:72:21:f4:c1: 36:12:62:c2:9d:62:12:13:94:38:fa:2d:28:98:36: fb:c4:e0:7f:d0:9b:8a:f7:1b:d0:fb:b9:40:72:ea: c4:ee:8a:d1:ed:c3:b2:b0:58:71:48:26:5b:2a:5f: db:92:b3:dd:56:eb:50:f4:c2:db:a0:e5:33:71:7d: 1e:a4:88:fb:6e:db:7f:00:95:5b:80:d9:84:24:6a: 46:41:c9:d2:ce:0d:5e:e8:2a:62:ee:c0:03:93:80: f5:d9:d0:a4:5a:1c:c3:0d:ff:44:3d:74:ac:a6:61: 9d:82:b6:39:2d:bd:97:2a:51:98:a6:50:14:87:c6: 5b:54:be:ed:3f:8e:f6:29:87:38:9a:20:99:08:4d: bb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CE:FD:FA:46:C2:24:0B:44:FB:84:2B:E4:A0:F8:62:3A:A0:F9:A3 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32352e302f32342d3234203d3e20323032363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.25.0/24 Signature Algorithm: sha256WithRSAEncryption cd:e0:af:16:47:4a:0a:07:6a:3e:81:51:8b:c9:95:67:bf:73: 37:da:c0:04:83:c5:15:c3:84:e9:24:53:6f:9f:93:94:09:dc: 22:04:9b:19:ec:a5:c4:10:65:ad:bd:40:21:d7:ff:97:44:34: 56:7a:3d:e9:60:05:05:ad:3d:b6:cd:93:7b:62:e1:c7:5d:2e: ed:d5:25:af:85:3f:36:75:ea:8e:de:74:8b:ab:17:1b:93:23: 53:8a:5a:5e:c8:cc:5c:b1:91:7e:e8:a1:42:c5:0e:c6:c8:b2: 96:bb:f2:43:32:d5:0e:3a:36:22:00:b6:d3:48:df:69:57:ce: 91:87:d6:dd:09:1c:02:24:7f:52:73:a3:9b:bb:b5:8b:68:64: ef:ac:ae:3b:ea:0a:f8:28:3f:25:f8:07:db:04:7d:74:d1:12: 4a:df:45:34:5e:77:d5:79:2c:0d:82:99:8d:99:9b:3c:6c:e2: eb:8a:a1:09:08:95:37:45:bb:3c:aa:a8:d5:55:ad:10:f3:56: 49:13:d4:c4:9a:46:32:b3:07:bb:3a:43:a1:38:05:49:f6:93: d7:30:e1:8c:dc:a2:30:a4:92:a7:1d:94:96:8d:56:11:c0:a9: 6e:24:c5:1e:20:5d:49:9b:a2:08:d4:5f:13:92:1c:9e:ed:2e: f8:83:68:64 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUByR9SwjtrHSTy6CanyyKLUrMqT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDhaFw0yNzAyMTExOTAzNDhaMDMxMTAvBgNV BAMTKDA5Q0VGREZBNDZDMjI0MEI0NEZCODQyQkU0QTBGODYyM0FBMEY5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCly0qzRqnwtmZVmyZQ82VpCFX0 /r3XMFUnIo8Otg/CAGT+0Rk3Yps35RpVU5OTnF/o/GjdTRVCDgqQY264FnJ0JcKi 6infqcJjGzWZSmuKWPnTKYh1rzHuI4HlS+Zpe4bYhF2arAt1JDXevBcCW/d3TBwc ciH0wTYSYsKdYhITlDj6LSiYNvvE4H/Qm4r3G9D7uUBy6sTuitHtw7KwWHFIJlsq X9uSs91W61D0wtug5TNxfR6kiPtu238AlVuA2YQkakZBydLODV7oKmLuwAOTgPXZ 0KRaHMMN/0Q9dKymYZ2CtjktvZcqUZimUBSHxltUvu0/jvYphziaIJkITbtVAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCc79+kbCJAtE+4Qr5KD4Yjqg+aMwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMjM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMyMzYzNjMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA WbkZMA0GCSqGSIb3DQEBCwUAA4IBAQDN4K8WR0oKB2o+gVGLyZVnv3M32sAEg8UV w4TpJFNvn5OUCdwiBJsZ7KXEEGWtvUAh1/+XRDRWej3pYAUFrT22zZN7YuHHXS7t 1SWvhT82deqO3nSLqxcbkyNTilpeyMxcsZF+6KFCxQ7GyLKWu/JDMtUOOjYiALbT SN9pV86Rh9bdCRwCJH9Sc6Obu7WLaGTvrK476gr4KD8l+AfbBH100RJK30U0XnfV eSwNgpmNmZs8bOLriqEJCJU3Rbs8qqjVVa0Q81ZJE9TEmkYyswe7OkOhOAVJ9pPX MOGM3KIwpJKnHZSWjVYRwKluJMUeIF1Jm6II1F8Tkhye7S74g2hk -----END CERTIFICATE-----Generated at Sat Feb 14 19:56:19 2026 by rpki-client